Follows Phase 0 of Plan: a very secure browser in Seed. Origin display owned by Seed with punycode shown raw and Seed-verified site identity; HTTPS only with fatal certificate errors; deny-all permissions with prompts only for clipboard write and fullscreen; downloads with warnings and quarantine; private network blocking for all pages; WebRTC, secure DNS and GPC defaults; third-party cookies blocked and a private window; site isolation confirmed.